AWS Certified Cloud Practitioner — Question 621

Which AWS service can defend against DDoS attacks?

Answer options

• A. AWS Firewall Manager
• B. AWS Shield Standard
• C. AWS WAF
• D. Amazon Inspector

Correct answer: B

Explanation

AWS Shield Standard provides automatic, always-on DDoS protection for all AWS customers at no additional cost to safeguard applications. While AWS WAF and AWS Firewall Manager help protect web applications and manage security rules, they are not dedicated DDoS mitigation services like AWS Shield. Amazon Inspector is a vulnerability management service and does not defend against active network attacks.